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IN THE CLAIMS 

Amended claims follow. Insertions are underlined, while deletions are struck out. The 
status of each claim is included prior to each heading. 

1. (Currently Amended) A system for management of a network of devices and resources 
available to the devices via a computer network, comprising: 

a network director>' defining a network topology of nodes corresponding to the 
network of devices and defining policies corresponding to and to be enforced upon the 
resources available to the devices; 

a policy orchestrator server in communication with the network directory, the 
policy orchestrator server being adapted to determine a hierarchical tree structure 
containing the nodes based upon location of each node in the network topology, 
determine a policy for each node in the hierarchical tree structure, and communicate said 
policy to the corresponding node; and 

an agent corresponding to each device in the network of devices, the agent being 
in communication with the policy orchestrator server and the resources corresponding to 
the device, the agent being adapted to receive data from the policy orchestrator server and 
to enforce the policies corresponding to the resources, 

wherein the policies corresponding to the resources of each device are selectively 
inherited along the hierarchical tree structure; 

wherein a management console is in communication with the network directory 
and tlie policy orchestrator server for providing a user interface^ tlie management console 
being adapted to selectively display the hierarchical tree structure and the policies stored 
in the network directory; 

wherein the management console dynamically determines the policy of a selected 
node of the hierarchical tree structure; 

wherein the management console dynamically determines the policy of the 
selected node by reading the policies of nodes along a path of nodes from a root of the 
hierarchical tree structure to the selected node and wherein the management console 
overwrites previously written policies upon reading conflicting policies at each node 
along the path of nodes; 
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wherein each agent includes a task execution component for causing performance 
of a scheduled task at a scheduled time, a policy enforcement component for enforcing 
policies applicable to resources of the corresponding device, a property collection 
component for collecting and storing properties of the corresponding resources of the 
device and for transmitting the properties to the policy orchestrator server, and an event 
collection component for collecting and storing event data and for transmitting the event 
data to the policy orchestrator server; 

vs^herein a directory management display of the management co nsole includes a 
scope pane, a selected node directory pane, and a details pane: 

wherein the scope peme displays the liierarchical tree structure as populated bv the 
management console: 

wherein the scope pane includes a software tab and a directory tab for display of 
software and directory content in the scope pane: 

wherein the selected node directory pane includes a policies tab, a proper ties tab, 
an events tab, and a tasks tab for display of policies, properties, events, and tasks in the 
selected node directory pane; 

wherein, if a node is selected, the node is highlighted in the hierarchical tree 
structure in the scope pane and details of the hierarchical tree structure and software 
hierarchy for the selected node is displayed in the selected node directory pane , 

2.-5. (Cancelled) 

6. (Original) The system for management of a network of devices and resources via a 
computer network according to claim 1, wherein each policy is selected from the group 
consisting of a configuration rule and a scheduled task. 

7. (Original) The system for management of a network of devices and resources via a 
computer network according to claim 1, wherein at least one policy is a scheduled task 
and wherein the agent causes performance of the task when the scheduled task is to be 
performed. 

8. (Original) The system for management of a network of devices and resources via a 
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computer network according to claim 1 , wherein the policy orchestrator server includes a 
software repository adapted to be selectively transmitted to the device via the agent 
corresponding to the device. 

9. (Original) The system for management of a network of devices and resources via a 
computer network according to claim 1, wherein the policy orchestrator server includes 
an agent installation module adapted to be transmitted to the device for installation of the 
corresponding agent on the device. 

10. (Cancelled) 

11. (Currently Amended) A method for management of a networic of devices and 
resources available to the devices via a computer network, comprising: 

determining a hierarchical tree strucuire based upon locations of devices in a 
network topology, each device being a node in the hierarchical tree structure; 

determining policies for each node in the hierarchical tree structure to be enforced 
by an agent corresponding to each node, the agent being in communication with the 
device and the resources corresponding to the device; and 

communicating the policy to the corresponding agent; 

wherein the policies corresponding to the resources of each device are selectively 
inherited along the hierarchical tree structure of the network directory; 

wherein the policy of a selected node of the hierarchical tree structure is 
dynamically determined by the management console; 

wherein the dynamic determining includes reading policies of nodes along a path 
of nodes from a coot of the hierarchical tree structure down to the selected node and 
overwriting previously written policies upon reading conflicting policies at each node 
along the path of nodes; 

wherein each agent includes a task execution component for causing performance 
of a scheduled task at a scheduled time, a policy enforcement component for enforcing 
policies applicable to resources of the corresponding device, a property collection 
component for collecting and storing properties of the corresponding resources of the 
device and for transmitting tlie properties to a policy orchestrator server, and an event 
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collection component for collecting and storing event data and for transmitting the event 
data to the policy orchestrator server; 

wherein a directory management display of the management console includes a 
scope pane, a selected node directory pane, and a details pane: 

wherein the scope pane displays the hierarchical tree structure as populated by the 
management console: 

wherein the scope pane includes a software tab and a directory tab for display of 
software and directory content in the scope pane: 

wherein the selected node directory pane includes a policies tab, a properties tab, 
an events tab, and a tasks tab for display of policies, properties, events, and tasks in the 
selected node directory pane: 

wherein, if a node is selected, the node is highlighted in the hierarchical tree 
structure in the scope pane and details of the hierarchical tree structure and software 
hierarchy for the selected node is displayed in the selected node directory pane . . 

12. (Original) The method for management of a network of devices and resources via a 
computer network according to claim 11, further comprising enforcing the polices by the 
agent upon the corresponding device and resources available to the device. 

13. (Original) The method for management of a network of devices and resources via a 
computer network according to claim 11, further comprising: transmitting an agent 
installation package to the corresponding device; installing the agent on the device; and 
transmitting a message by the agent to the policy orchestrator server, the message 
containing properties of the device, the agent being adapted to enforce the policies 
corresponding to the resources contained in the network directory. 

14. (Previously Amended) The method for management of a network of devices and 
resources via a computer network according to claim 1 1, further comprising selectively 
displaying the hierarchical tree structure and the policies stored in the network directory 
by a management console in communication with the network directory and the policy 
orchestrator server, the management console providing a user interface. 
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15.-17. (Cancelled) 

1 8. (Original) The method for management of a network of devices and resources via a 
computer network according to claim 1 1, wherein each policy is selected from the group 
consisting of a configuration rule and a scheduled task. 

19. (Previously Amended) The method for management of a network of devices and 
resources via a computer network according to claim 1 1 , wherein when the policy is a 
scheduled task, further comprising causing performance of the task by the agent when the 
scheduled task is to be performed. 

20. (Previously Amended) The method for management of a network of devices and 
resources via a computer network according to claim 1 1, further comprising selectively 
transmitting data from a software repository of the policy orchestrator server to the 
device via the agent corresponding to the device. 

21. (Previously Amended) The method for management of a network of devices and 
resources via a computer network according to claim 1 1, further comprising transmitting 
an agent installation module by the policy orchestrator server to the device for installation 
of the corresponding agent on the device. 

22. (Currently Amended) A computer program product for management of a network of 
devices and resources available to the devices via a computer network, comprising: 

computer code that determines a hierarchical tree structure based upon locations 
of devices in a network topology, each device being a node in the hierarchical tree 
structure; 

computer code that determines policies for each node in the hierarchical tree 
structure to be enforced by an agent corresponding to each node, the agent being in 
commxmication with the device and the resources corresponding to the device; 

computer code that communicates the policy to the corresponding agent; 

wherein the pohcies corresponding to the resources of each device are selectively 
inherited along the hierarchical tree structure of the network directory; 
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computer code that dynamically determines the policy of a selected node of the 
hierarchical tree structure by the management console, 

wherein the computer code that dynamically determines includes computer code 
that reads policies of nodes along a path of nodes from a root of the hierarchical tree 
structure down to the selected node and computer code that overwrites previously written 
policiesupon reading conflicting policies at each node along the path of nodes; 

wherein each agent includes a task execution component for causing performance 
of a scheduled task at a scheduled time, a policy enforcement component for enforcing 
policies applicable to resources of the corresponding device, a property collection 
component for collecting and storing properties of the corresponding resources of the 
device and for transmitting the properties to tlie policy orchestrator server, and an event 
collection component for collecting and storing event data and for transmitting the event 
data to the policy orchestrator server; and 

a computer readable medium that stores said computer codes: 

wherein a directorv management display of the management c onsole includes a 
scope pane, a selected node directory pane, and a details pane: 

wherein the scope pane displays the hierarchical tree structure as populated by the 
management console: 

wherein the scope pane includes a software tab and a directory tab for display of 
software and directory content in the scope pane: 

wherein the selected node directorv pane includes a policies tab, a properties tab, 
an events tab, and a tasks tab for display of policies, properties, events , and tasks in the 
selected node directorv pane: 

wherein, if a node is selected, the node is highlighted in the hierarchical tree 
structure in the scope peme and details of the hierarchical tree structure and software 
hierarchy for the selected node is displayed in the selected node directory pane , 

23. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, further comprising 
computer code that enforces tlie polices upon the corresponding device and resources 
available to the device. 
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24. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22. further comprising: 
computer code tliat transmits an agent installation package to the corresponding device: 
computer code that installs the agent on the device; and computer code that transmits a 
message by the agent to the policy orchestrator server, the message containing properties 
of the device, the agent being adapted to enforce the policies corresponding to the 
resources contained in the network directory. 



25. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, further comprising 
computer code that selectively displays the hierarchical tree structure and the policies 
stored in the network directory in communication with the network directory and the 
policy orchestrator server, the management console providing a user interface. 

26. - 28. (Cancelled) 

29. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, wherein each policy is 
selected from the group consisting of a configuration rule and a scheduled task. 

30. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, wherein when the policy is 
a scheduled task, further comprising computer code that causes performance of the task 
by the agent when the scheduled task is to be performed. 

3 1 . (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, further comprising 
computer code that selectively transmits data from a software repository of the policy 
orchestrator server to the device via the agent corresponding to the device. 

32. (Original) The computer program product for management of a network of devices 
and resources via a computer network according to claim 22, further comprising 
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computer code that transmits an agent installation module by the policy orchestrator 
server to the device for installation of the corresponding agent on the device. 

33. (Currently Amended) A computer program product for management of a network of 
devices and resources available to the devices via a computer network, comprising: 
computer code that contains a network directory defining a hierarchical tree 
structure containing nodes corresponding to the network of devices and defining policies 
corresponding to and to be enforced upon the resources available to the devices; 

computer code that facilitates communication between a policy orchestrator 
server and the network directory to facilitate accessing data firom and storing data to the 
network directory, the data relating to the nodes of the hierarchical tree structure 
corresponding to the devices and to the policies corresponding to the resources; 

computer code that facilitates communication between an agent and the policy 
orchestrator server and the resources corresponding to the device, the agent computer 
code being adapted to enforce the policies corresponding to the resources contained in the 
network directory, wherein the policies corresponding to the resources of each device are 
selectively inherited down the hierarchical tree structure of the network directory; and 
a r computor readable medium that stores said oomputcr codes; and 
computer code that dynamically determines the policy of a selected node of the 
hierarchical tree structure by the management console, wherein the computer code that 
dynamically determines includes computer code that reads poHcies of nodes along a path 
of nodes from a root of the hierarchical tree structure down to the selected node and 
computer code that overv/rites previously written policies upon reading conflicting 
policies at each node along the path of nodes; and 

a computer readable medium that stores said computer codes; 
wherein each agent includes a task execution component for causing performance 
of a scheduled task at a scheduled time, a policy enforcement component for enforcing 
policies applicable to resources of the corresponding device, a property collection 
component for collecting and storing properties of the corresponding resources of the 
device and for transmitting the properties to the policy orchestrator server, and an event 
collection component for collecting and storing event data and for transmitting the event 
data to the policy orchestrator server; 
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wbPrein a directory management display of the management console includes a 
esca pe pane. 3 selected node directory pane, and a details pane; 

wherein the scope Pane displays the hierarchical tree structure as populated by thf 

management console: 

wherein the scope pane includes a software tab and a directory tab for di s p lay of 

software and directory content in the sco pe pane: 

wherein the selected node directory pane includes a policies tab, a properties tab, 
an events tab- and a tasks tab for display of policies , properties, events, and tasks in tlie 
selected node directory pane: 

wherein, if a node is selected, the node is highlig hted in the hierarchical tree 
structure in the scone pane and details of the hiera rchical tree structure and software 
hierarchy for the selected node is displayed in the select ed node directory pane. 

34. - 38. (Cancelled) 
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